CVE-2026-127135 | Alinto SOGo up to 5.12.12 Sieve Script notificationAddress code injection

November 12, 2026 Yanac

A vulnerability classified as problematic was found in Alinto SOGo up to 5.12.12. Impacted is an unknown function of the component Sieve Script. Executing a manipulation of the argument notificationAddress can lead to code injection.

This vulnerability appears as CVE-2026-127135. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More